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DETAILED ACTION 
Continued Examination Under 37 CFR 1,114 

1 . A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1.17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1.17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on July 6, 
2007 has been entered. 

2. Per the received request for continued examination (RCE), claims 1 ,3,7,1 1 , 22, 
23, and 44 have been amended, and claim 6 has been cancelled. 

3. Claims 1-5, 7-12, 14-23, 25-34, and 36-44 are currently being considered. 

Response to Arguments 

4. Applicant's arguments with respect to claims 1-5, 7-12, 14-23, 25-34, and 36-44 
have been considered but are moot in view of the new ground(s) of rejection. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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5. Claims 1-5, 8-12, 14, 16-21, 23, 25-38, 30-34, 36, and 38-43 rejected under 35 
U.S.C. 103(a) as being unpatentable over Lewis (U.S. Patent 6,213,391) in view of Lin 
etal. (U.S. Patent 6,360,953) 

Regarding claim 1, Lewis discloses: 

A method for biometrically securing access to an electronic system, said method 
comprising the steps of: 

obtaining identification of a user with an electronic system using a card reader in 
communication with said electronic system, the identification of said user further 
retrieved from a smart card presented to the electronic system by said user (column 3 
lines 47-65, column 7 lines 36-65), wherein a biometric input is received by the smart 
card and used in verifying the identity of an individual] 

accessing a user profile including biometric attributes associated with said user 
through a computer network from a remote server based on the identification of said 
user obtained from said smart card (column 10, lines 8-23), wherein verifying means 
may receive a user profile from a central database] 

prompting said user to input to a biometric user interface associated with said 
electronic system at least one biometric attribute randomly selected from said user 
profile retrieved from said remote server (column 5 lines 1-9, column 7 lines 36-65), 
wherein the system may require the user to speak one of any specific code words 
previously recorded by the user, and 
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said electronic system permitting said user access to perform a user-desired 
activity with the electronic system if at least one biometric attribute input by said user to 
said biometric user interface associated with said electronic system matches said at 
least one biometric attribute randomly selected from said user profile (column 5 lines 1- 
9), wherein if the biometrics of the user match, the user is given access to his account. 

Lewis does not explicitly disclose that the identification is obtained wirelessly through 
the use of a contactless smart card and a contactless smart card reader. Lin discloses 
a system wherein a contactless smart card is used to gain access to an restricted area 
(Lin: column 4, lines 29-44) by comparing fingerprints. This authentication information 
is wireless transferred to the authorization station which permits the user to gain access 
(Lin: column 4, lines 43-46). Lewis and Lin are analogous arts in that both use 
fingerprint data and smart cards to gain access to a restricted area. It would have been 
obvious to one of ordinary skill in the art at the time of invention to use a contactless 
smart card as disclosed by Lin in the system of Lewis because it "affords the relatively 
high security association with personal print verification without impeding traffic flow 
through the security check point" (Lin: column 2, lines 65-67). 

Claim 2 is rejected as applied above in rejecting claim 1. Furthermore, Lewis discloses: 

The method of claim 1 wherein said computer network is a secure computer 
network (column 5 lines 64-67, column 9 lines 31-38), wherein the network can support 
an ATI\/I transaction. 
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Claim 3 is rejected as applied above in rejecting claim 1. Furthermore, Lewis discloses: 
The method of claim 1 wherein said remote server is a biometric broker (column 
1 0 lines 8-23), wherein the biometric information may be retrieved from a central 
database. 

Claim 4 is rejected as applied above in rejecting claim 1. Furthermore, Lewis discloses: 
The method of claim 1 further comprising the steps of: 

obtaining at least one biometric attribute from said user from compilation in said 
user profile (column 4 lines 40-57), wherein at the time an account is opened, the user 
provides biometric input to be stored on the smart card and/or the database] 

compiling said user profile (column 4 lines 40-57), wherein the biometric input is 
transformed into digital format and stored] and 

storing said user profile in said server accessible by at least one biometric user 
interface associated with said electronic system (column 4 lines 40-57), wherein at the 
time an account is opened, the user provides biometric input to be stored on the smart 
card and/or the database. 

Claim 5 is rejected as applied above in rejecting claim 4. Furthermore, Lewis discloses: 
The method of claim 4 further comprising the steps of: 
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permitting the user to modify said user profile, in response to approval of a 
request by said user (column 5 lines 31-59), wherein the user can change a PIN in a 
bank system (column 1 lines 56-57) at any time. 

Claim 8 is rejected as applied above in rejecting claim 1. Furthermore, Lewis discloses: 

The method of claim 1 wherein said electronic system comprises at least one 
wireless device that operates with a wireless network (column 9 lines 38-46). 

Claim 9 is rejected as applied above in rejecting claim 1. Furthermore, Lewis discloses: 

The method of claim 1 wherein said electronic system comprises at least one 
computer workstation operable over an associated network (column 3 lines 47-65). 

Claim 10 is rejected as applied above in rejecting claim 1. Furthermore, Lewis 
discloses: 

The method of claim 1 wherein said electronic system comprises an automated 
teller machine (column 3 lines 47-52). 

Claim 11 is rejected as applied above in rejecting claim 1. Furthermore, Lewis 
discloses: 

The method of claim 1 wherein said electronic system comprises a secured entry 
system to a secured environment (column 3 lines 47-52), wherein the electronic system 
could allow entry through a security gate. 
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Claim 12 is rejected as applied above in rejecting claim 1. Furthermore, Lewis 
discloses: 

The method of claim 1 wherein said electronic system comprises a wireless 
network (column 9 lines 38-46). 

Claim 14 is rejected as applied above in rejecting claim 1. Furthermore, Lewis 
discloses: 

The method of claim 1 wherein said electronic system comprises a wireless 
device (column 9 lines 38-46). , 

Claim 16 is rejected as applied above in rejecting claim 1. Furthermore, Lewis 
discloses: 

The method of claim 1 wherein said user-desired activity comprises a financial 
transaction (column 3 lines 47-52). 

Claim 17 is rejected as applied above in rejecting claim 1. Furthermore, Lewis 
discloses: 

The method of claim 1 wherein said user-desired activity comprises an ATM 
transaction (column 3 lines 47-52). 
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Claim 18 is rejected as applied above in rejecting claim 1. Furthermore, Lewis 
discloses: 

The method of claim 1 wherein said user-desired activity comprises access to a 
secure area (column 3 lines 47-52), wherein the electronic system could allow entry 
through a security gate. 

Claim 19 is rejected as applied above in rejecting claim 1. Furthermore, Lewis 
discloses: 

The method of claim 1 wherein said user-desired activity comprises access to 
data from said electronic system (column 3 lines 47-52). 

Claim 20 is rejected as applied above in rejecting claim 1. Furthermore, Lewis 
discloses: 

The method of claim 1 wherein said user-desired activity comprises execution of 
a mechanical activity (column 3 lines 47-52), wherein the electronic system could allow 
entry through a security gate. 

Claim 21 is rejected as applied above in rejecting claim 1. Furthermore, Lewis 
discloses: 

The method of claim 1 further comprising the step of: 

initiating access to said electronic system utilizing only one biometric input to said 
electronic system (column 8 lines 7-15). 
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Regarding claim 23, Lewis discloses: 

A system for biometrically securing access, said system comprising: 
an electronic system adapted to permit a user to perform a user-desired activity if 
at least one biometric attribute input by the user to said biometric user interface 
matches said at least one biometric attribute randomly selected from a remote server 
based on identification of a user obtained from a smart card in communication with a 
card reader associated with the electronic system (column 5 lines 1-9, column 7 lines 
36-65), wherein said smart card is adapted to store at least one user profile including 
biometric attributes and provide said electronic system access to at least one user 
profile (column 3 lines 47-65, column 7 lines 36-65), wherein a biometric input is 
received by the smart card and used in verifying the identity of an individual] 

a smart card reader associated with said electronic system (column 4 lines 27- 
64); and 

a biometric user interface associated with said electronic system adapted to 
enable said user to input at least one biometric to said electronic system for comparison 
to at least one biometric attribute randomly selected by said electronic system from said 
user profile (column 5 lines 1-9), wherein if the biometrics of the user match, the user is 
given access to his account; 

wherein said electronic system is adapted to permit said user to perform a user- 
desired activity, if at least one biometric attribute input by said user to said biometric 
user interface matches said at least one biometric attribute randomly selected from said 
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user profile by said electronic system (column 5 lines 1-9), wherein if the biometrics of 
the user match, the user is given access to his account. 

Lewis does not explicitly disclose that the identification is obtained wirelessly 
through the use of a contactless smart card and a contactless smart card reader. Lin 
discloses a system wherein a contactless smart card is used to gain access to an 
restricted area (Lin: column 4, lines 29-44) by comparing fingerprints. This 
authentication information is wireless transferred to the authorization station which 
permits the user to gain access (Lin: column 4, lines 43-46). Lewis and Lin are 
analogous arts in that both use fingerprint data and smart cards to gain access to a 
restricted area. It would have been obvious to one of ordinary skill in the art at the time 
of invention to use a contactless smart card as disclosed by Lin in the system of Lewis 
because it "affords the relatively high security association with personal print verification 
without impeding traffic flow through the security check point" (Lin: column 2, lines 65- 
67). 

Claim 25 is rejected as applied above in rejecting claim 23. Furthermore, Lewis 
discloses: 

The system of claim 23 wherein said user profile is accessible from a biometric 
broker via a secure network connection (column 10 lines 8-23), wherein the biometric 
information may be retrieved from a central database. 
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Claim 26 is rejected as applied above in rejecting claim 23. Furthermore, Lewis 
discloses: 

The system of claim 23 wherein: 

at least one biometric attribute is obtained from said user for compilation in said 
user profile (column 4 lines 40-57), wherein at the time an account is opened, the user 
provides biometric input to be stored on the smart card and/or the database. 

Claim 27 is rejected as applied above in rejecting claim 23. Furthermore, Lewis 
discloses: 

The system of claim 23 wherein said user is permitted to modify said user profile, 
in response to approval of a request by said user (column 5 lines 31-59), wherein the 
user can change a PIN in a bank system (column 1 lines 56-57) at any time. 

Claim 28 is rejected as applied above in rejecting claim 23. Furthermore, Lewis 
discloses: 

The system of claim 23 further comprising: 

module for comparing at least one biometric attribute input by said user to said 
biometric user interface associated with said electronic system with said at least one 
biometric attribute randomly selected from said user profile (column 5 lines 1-9), 
wherein if the biometrics of the user match, the user is given access to his account. 
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Claim 30 is rejected as applied above in rejecting claim 23. Furthermore, Lewis 
discloses: 

The system of claim 23 wherein said electronic system comprises at least one 
wireless device that operates with a wireless network (column 9 lines 38-46). 

Claim 31 is rejected as applied above in rejecting claim 23. Furthermore, Lewis 
discloses: 

The system of claim 23 wherein said electronic system comprises at least one 
computer workstation accessible over said computer network (column 3 lines 47-65). 

Claim 32 is rejected as applied above in rejecting claim 23, Furthermore, Lewis 
discloses: 

The system of claim 23 wherein said electronic system comprises an automated 
teller machine (column 3 lines 47-52). 

Claim 33 is rejected as applied above in rejecting claim 23. Furthermore, Lewis 
discloses: 

The system of claim 23 wherein said electronic system comprises a secured 
entry system to a secured environment (column 3 lines 47-52), wherein the electronic 
system could allow entry through a security gate. 
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Claim 34 is rejected as applied above in rejecting claim 23. Furthermore, Lewis 
discloses: 

The system of claim 23 wherein said computer network comprises a wireless 
network (column 9 lines 38-46). 

Claim 36 is rejected as applied above in rejecting claim 23. Furthermore, Lewis 
discloses: 

The system of claim 23 wherein said electronic system comprises a wireless 
device (column 9 lines 38-46). 

Claim 38 is rejected as applied above in rejecting claim 23. Furthermore, Lewis 
discloses: 

The system of claim 23 wherein said user-desired activity comprises a financial 
transaction (column 3 lines 47-52). 

Claim 39 is rejected as applied above in rejecting claim 23. Furthermore, Lewis 
discloses: 

The system of claim 23 wherein said user-desired activity comprises an ATM 
transaction (column 3 lines 47-52). 

Claim 40 is rejected as applied above in rejecting claim 23. Furthermore, Lewis 
discloses: 
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The system of claim 23 wherein said user-desired activity comprises access to a 
secure area (column 3 lines 47-52), wherein the electronic system could allow entry 
through a security gate. 

Claim 41 is rejected as applied above in rejecting claim 23. Furthermore, Lewis 
discloses: 

The system of claim 23 wherein said user-desired activity comprises access to 
data from said electronic system (column 3 lines 47-52). 

Claim 42 is rejected as applied above in rejecting claim 23. Furthermore, Lewis 
discloses: 

The system of claim 23 wherein said user-desired activity comprises execution of 
a mechanical activity (column 3 lines 47-52), wherein the electronic system could allow 
entry through a security gate. 

Claim 43 is rejected as applied above in rejecting claim 23. Furthermore, Lewis 
discloses: 

The system of claim 23 wherein access to said electronic system is initiated 
utilizing only one biometric attribute input to said electronic system (column 8 lines 7- 
15). 
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6. Claims 7, 15, 29, 37 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Lewis (U.S. Patent 6,213,391) in view of Lin etal. (U.S. Patent 6,360,953) in view 
of Price-Francis (U.S. Patent 5,815,252). 

Claim 7 is rejected as applied above in rejecting claim 6. Lewis-Lin does not 
explicitly disclose subsequently prompting a user to input another biometric input if the 
at least one biometric attribute does not match the one randomly selected from the user 
profile. Price-Francis discloses subsequently prompting a user to input another 
biometric if at least one previously input biometric does not match the randomly 
selected biometric in the user profile (column 6 lines 59- column 7 line 4). Lewis and 
Price-Francis are analogous arts in that both use biometrics to authenticate a user 
before allowed the user to perform a secured activity. It would have been obvious to 
modify the system of Lewis to provide another input of biometrics if the first failed to 
authenticate for "allowing for comparison of two or more fingerprints, the possibility of a 
defective signal based on an obscured or unavailable fingerprint, environmental factors, 
such as excess moisture on the fingers, or any artifact preventing a match from being 
made, can be compensated for" (column 6 line 59 - column 7 line 4). 

Claim 15 is rejected as applied above in rejecting claim 6. Lewis does not explicitly 
disclose subsequently prompting a user to input another biometric input if the at least 
one biometric attribute does not match the one randomly selected from the user profile. 
Price-Francis discloses subsequently prompting a user to input another biometric if at 
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least one previously input biometric does not match the randomly selected biometric in 
the user profile (column 6 lines 59- column 7 line 4). Lewis and Price-Francis are 
analogous arts in that both use biometrics to authenticate a user before allowed the 
user to perform a secured activity. It would have been obvious to modify the system of 
Lewis to provide another input of biometrics if the first failed to authenticate for "allowing 
for comparison of two or more fingerprints, the possibility of a defective signal based on 
an obscured or unavailable fingerprint, environmental factors, such as excess moisture 
on the fingers, or any artifact preventing a match from being made, can be 
compensated for" (column 6 line 59 - column 7 line 4). 

Claim 29 is rejected as applied above in rejecting claim 28. Lewis does not explicitly 
disclose subsequently prompting a user to input another biometric input if the at least 
one biometric attribute does not match the one randomly selected from the user profile. 
Price-Francis discloses subsequently prompting a user to input another biometric if at 
least one previously input biometric does not match the randomly selected biometric in 
the user profile (column 6 lines 59- column 7 line 4). Lewis and Price-Francis are 
analogous arts in that both use biometrics to authenticate a user before allowed the 
user to perform a secured activity. It would have been obvious to modify the system of 
Lewis to provide another input of biometrics if the first failed to authenticate for "allowing 
for comparison of two or more fingerprints, the possibility of a defective signal based on 
an obscured or unavailable fingerprint, environmental factors, such as excess moisture 



Application/Control Number: 09/757,903 Page 17 

Art Unit: 2131 

on the fingers, or any artifact preventing a nnatch from being made, can be 
compensated for" (column 6 line 59 - column 7 line 4). 

Claim 37 is rejected as applied above in rejecting claim 23. Lewis does not explicitly 
disclose subsequently prompting a user to input another biometric input if the at least 
one biometric attribute does not match the one randomly selected from the user profile. 
Price-Francis discloses subsequently prompting a user to input another biometric if at 
least one previously input biometric does not match the randomly selected biometric in 
the user profile (column 6 lines 59- column 7 line 4). Lewis and Price-Francis are 
analogous arts in that both use biometrics to authenticate a user before allowed the 
user to perform a secured activity. It would have been obvious to modify the system of 
Lewis to provide another input of biometrics if the first failed to authenticate for "allowing 
for comparison of two or more fingerprints, the possibility of a defective signal based on 
an obscured or unavailable fingerprint, environmental factors, such as excess moisture 
on the fingers, or any artifact preventing a match from being made, can be 
compensated for" (column 6 line 59 - column 7 line 4). 

7. Claims 22, and 44 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Lewis (U,S. Patent 6,213,391) in view of Lin et al. (U.S. Patent 6,360,953) further 
in view of Abrahams (U.S. Patent 6,944,773). 



Regarding claim 22, Lewis discloses: 
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A method for biometrically securing access to a secure area, said method 
comprising the steps of: 

obtaining identification of a user by an electronic system using a a card reader in 
communication with said electronic system, the identification of said user further 
retrieved from a smart card(column 3 lines 47-65, column 7 lines 36-65), wherein a 
biometric input is received by the smart card and used in verifying the identity of an 
individual] 

based on said identification, said electronic system using a computer network to 
obtain a user profile associated with said user from a remote server, said user profile 
including biometric attributes (column 4 lines 55-57, column 10 lines 10-22), wherein the 
profile can be fetched from a central database] 

said electronic system prompting said user to input into a biometric user interface 
associated with said electronic system at least one biometric attribute randomly 
selected by said electronic system 

Lewis does not explicitly disclose that the identification is obtained wirelessly 
through the use of a contactless smart card and a contactless smart card reader. Lin 
discloses a system wherein a contactless smart card is used to gain access to an 
restricted area (Lin: column 4, lines 29-44) by comparing fingerprints. This 
authentication information is wireless transferred to the authorization station which 
permits the user to gain access (Lin: column 4, lines 43-46). Lewis and Lin are 
analogous arts in that both use fingerprint data and smart cards to gain access to a 
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restricted area. It would have been obvious to one of ordinary skill in the art at the tinne 
of invention to use a contactless smart card as disclosed by Lin in the system of Lewis 
because it "affords the relatively high security association with personal print verification 
without impeding traffic flow through the security check point" (Lin: column 2, lines 65- 
67). 

Lewis-Lin does not explicitly mention randomly selecting at least one biometric 
attribute by said electronic system from the user profile. Abrahams discloses prompting 
a user for two or more biometric attributes (fingerprints), which are randomly selected, 
and if the fingerprints match, authenticating the user to perform a task (column 3 lines 
27-50). Abrahams and Lewis are analogous arts in that both use biometric attributes to 
authenticate a user to perform a task including financial transactions. Allowing the 
system of Lewis to check for multiple biometrics would be feasible as the smart card 
and the biometric database of Lewis store multiple biometric attributes of each user 
(column 5 lines 1-9). It would have been obvious to one of ordinary skill in the art at the 
time of invention to prompt the user for randomly selected biometric attributes before 
authenticating the user so that the likelihood of fraud is reduced (Abrahams: column 4 
lines 15-22, column 4 lines 57-59). 

Regarding claim 44, Lewis discloses: 

A system for biometrically securing access to an electronic system, said system 
comprising: 
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an electronic system adapted to permit a user to perform a user-desired activity if 
at least one biometric attribute input by the user to said biometric user interface 
matches said at least one biometric attribute randomly selected from said user profile 
accessible by the electronic system over a computer network from a remote server, said 
electronic system including access to a remote server through electronic connection to 
a computer network and said remote server adapted to store at least one user profile 
including biometric attributes and provide said electronic system to said at least one 
user profile (column 4 lines 55-57, column 10 lines 10-22), wherein the profile can be 
fetched from a central database. ] 

Lewis does not explicitly disclose that the identification is obtained wirelessly 
through the use of a contactless smart card and a contactless smart card reader. Lin 
discloses a system wherein a contactless smart card is used to gain access to an 
restricted area (Lin: column 4, lines 29-44) by comparing fingerprints. This 
authentication information is wireless transferred to the authorization station which 
permits the user to gain access (Lin: column 4, lines 43-46). Lewis and Lin are 
analogous arts in that both use fingerprint data and smart cards to gain access to a 
restricted area. It would have been obvious to one of ordinary skill in the art at the time 
of invention to use a contactless smart card as disclosed by Lin in the system of Lewis 
because it "affords the relatively high security association with personal print verification 
without impeding traffic flow through the security check point" (Lin: column 2, lines 65- 
67). 
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Lewis-Lin does not explicitly mention randomly selecting at least one biometric 
attribute by said electronic system from the user profile. Abrahams discloses prompting 
a user for two or more biometric attributes (fingerprints), which are randomly selected, 
and if the fingerprints match, authenticating the user to perform a task (column 3 lines 
27-50). Abrahams and Lewis are analogous arts in that both use biometric attributes to 
authenticate a user to perform a task including financial transactions. Allowing the 
system of Lewis to check for multiple biometrics would be feasible as the smart card 
and the biometric database of Lewis store multiple biometric attributes of each user 
(column 5 lines 1-9). It would have been obvious to one of ordinary skill in the art at the 
time of invention to prompt the .user for randomly selected biometric attributes before 
authenticating the user so that the likelihood of fraud is reduced (Abrahams: column 4 
lines 15-22, column 4 lines 57-59). 



Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Kaveh Abrishamkar whose telephone number is 571- 
272-3786. The examiner can normally be reached on Monday thru Friday 8-5. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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